lib/onebox/engine/google_photos_onebox.rb in onebox-1.9.27.1 vs lib/onebox/engine/google_photos_onebox.rb in onebox-1.9.27.2

@@ -31,11 +31,11 @@
         escaped_url = ::Onebox::Helpers.normalize_url_for_output(url)
         album_title = og.description.nil? ? og.title : "[#{og.description}] #{og.title}"
 
         <<-HTML
             <div class='onebox google-photos-album'>
-              <a href='#{escaped_url}' target='_blank'>
+              <a href='#{escaped_url}' target='_blank' rel='noopener'>
                 <span class='outer-box' style='width:#{og.image_width}px'>
                   <span class='inner-box'>
                     <span class='album-title'>#{Onebox::Helpers.truncate(album_title, 80)}</span>
                   </span>
                 </span>
@@ -47,10 +47,10 @@
 
       def image_html(og)
         escaped_url = ::Onebox::Helpers.normalize_url_for_output(url)
 
         <<-HTML
-            <a href='#{escaped_url}' target='_blank' class="onebox">
+            <a href='#{escaped_url}' target='_blank' rel='noopener' class="onebox">
               <img src='#{og.get_secure_image}' #{og.title_attr} alt='Google Photos' height='#{og.image_height}' width='#{og.image_width}'>
             </a>
           HTML
       end
     end